TikTok can read everything - even passwords
TikTok can apparently record every click and every keystroke in its in-app browser, including passwords and credit card information. The company itself says that the technical possibility exists, but is not used.
"We don't know what TikTok uses this feature for. Technically, it is nothing more than a keylogger on third-party websites," Krause writes. This means that the Chinese company can theoretically record any input, including passwords or credit card information. Additionally explosive: Unlike in the apps of Facebook or Instagram, users of TikTok have no direct option to open links in the standard browser of the mobile phone instead. Furthermore, the in-app browsers of the meta-apps also record every click on links, but at least no keystrokes.
TikTok: "We don't collect passwords"
Implementing this code must have been a conscious decision by TikTok, according to Krause: "It's a significant development effort that doesn't happen by accident or by chance."
Whether TikTok actually uses the code to collect data, whether data is sent to the company's servers or to third-party providers, Krause does not know.
These articles might also interest you